Researchers flag two zero-days in Windows Print Spooler

Read the original article: Researchers flag two zero-days in Windows Print Spooler

In May 2020, Microsoft patched CVE-2020-1048, a privilege escalation vulnerability in the Windows Print Spooler service discovered by Peleg Hadar and Tomer Bar from SafeBreach Labs. A month later, the two researchers found a way to bypass the patch and re-exploit the vulnerability on the latest Windows version. Microsoft assigned this vulnerability a new identification number – CVE-2020-1337 – and will patch it on August 2020 Patch Tuesday. They’ve also discovered a DoS flaw affecting … More →

The post Researchers flag two zero-days in Windows Print Spooler appeared first on Help Net Security.

Read the original article: Researchers flag two zero-days in Windows Print Spooler